auth check on find